How to Sign in to Saner CVEM via Auth0 Using SAML SSO

Modified on Mon, 27 Oct at 10:48 AM

Product version: 6.5.x.x

Overview

This article explains how to configure and enable Single Sign-On (SSO) access to Saner CVEM through Auth0 using the SAML protocol. By integrating Auth0 with Saner CVEM, organizations can enable centralized authentication and streamline secure access for users.

Pre-requisites for Signing In via Auth0 SSO

Before configuring SSO, ensure that you have the following details from your Auth0 Identity Provider:

Identity Provider Single Sign-On URL
X.509 Certificate
Issuer ID

These details are essential for completing the SAML configuration in Saner CVEM.

Steps to Configure SAML-Based SSO

Step 1: Retrieve Metadata Information from Saner CVEM

Sign in to your Saner CVEM console: https://saner.secpod.com
Go to the Control Panel.
Under Settings, select SSO Authentication.
Click Download SSO Metadata File.
Open the downloaded metadata file in a text editor or browser.
Copy and save the Entity ID and ACS URL — these will be used in Auth0 configuration.

Step 2: Configure SAML SSO in Auth0

Sign in to your Auth0 Admin Console.
Click Applications in the left menu, then select Applications.
Click Create Application, choose Regular Web Application, name it (e.g., Saner CVEM App), and click Create.
Once the app is created, open it and go to Settings.
Under Application URIs, enter the Saner CVEM metadata details under Allowed Callback URLs.
Scroll down and click Save Changes.
Navigate to the Add-ons tab and enable SAML2 Web App.

Click Settings and add the following JSON:

{ "mappings": { "email": "Email" }, "nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
}

Click Save and enable the SAML2 Web App add-on.
Under the Usage section, download the metadata file and Auth0 certificate file.

Step 3: Configure SSO in Saner CVEM

Go back to the SSO Authentication section in Saner CVEM.
Click New SSO Policy.
Enter the Issuer ID, SSO URL, and X.509 Certificate copied from Auth0.
Provide a name and description for the SSO policy.
Enable Signed Authentication if it was configured in Auth0.
Click Create to save the policy.

Assigning Users to the App in Auth0

Go to Applications in Auth0.
Select the application you created for Saner CVEM (e.g., Saner CVEM App).
Under Connections, enable the user database for which you want to allow access.

Assigning SSO Policy to Saner CVEM Users

Note: Ensure that the User Login ID in Saner CVEM matches the Auth0 Username before applying the policy.

In Saner CVEM, go to the Control Panel.
Click on Users.
Select the users who should be assigned the Auth0 SSO policy.
Under Actions, click Enforce SSO Authentication.
Choose the Auth0 SSO Policy from the drop-down menu.
Click Confirm.

How to Apply SSO Policy to a New Saner CVEM User

Log in to Saner CVEM.
Click Control Panel (top-right corner).
The Control Panel page will display all organizations by default.
Click the Users section.
Click New User at the top-right corner.
Enter the Login ID, Name, Organization, and Password.
Select the Role of the user from the drop-down menu.
Choose the Managing Organizations as needed.
Under SSO Policy, select the previously created Auth0 SSO Policy.
Click Create to save the user configuration.

Testing the SAML Configuration

Via SP-Initiated Flow

Go to the Saner CVEM Sign-in page.
Enter your email address and click Next.
You will be redirected to Auth0 for authentication.
If not already logged in, enter your Auth0 credentials.
Once authenticated, you will be redirected back to Saner CVEM and signed in successfully.

Via IdP-Initiated Flow

Sign in to your Auth0 End-User Dashboard.
Click on the SAML App (Saner CVEM App) configured for Saner CVEM.
You will be redirected to Saner CVEM and signed in automatically.

Conclusion

You have successfully configured and integrated Auth0 SAML-based SSO with Saner CVEM. Users can now securely authenticate to Saner CVEM using centralized credentials managed in Auth0, improving both convenience and security across the organization.